Struct CrsModule 

pub struct CrsModule { /* private fields */ }

A WafModule evaluating imported CRS/ModSecurity rules. Build with [CrsModule::from_str] (one source) — the proxy loader concatenates the configured files in include order and resolves the boot report.

Implementations

impl CrsModule

pub fn from_source(source: &str) -> Self

Parse + compile one seclang source (e.g. the configured files concatenated in include order).

pub fn from_parsed(parsed: ParsedRuleset) -> Self

Compile an already-parsed ruleset (rules that fail to compile join skipped).

pub fn loaded_count(&self) -> usize

Number of rules successfully loaded (fast + slow).

pub fn skipped(&self) -> &[SkippedRule]

Rules that could not be loaded into the v1 subset (with reasons).

pub fn report(&self) -> String

One-line boot summary; the proxy logs this so the coverage gap is explicit (D3=A).

Trait Implementations

impl WafModule for CrsModule

fn structural(&self) -> bool

CRS rules carry external patterns the native ContentPrefilter does not know about, so the fast-path cannot prove them inert → this module must run on every request.

fn id(&self) -> &str

fn phase(&self) -> Phase

fn init(&mut self, _cfg: &Config)

Called once at startup; compile/init rules here, never in inspect.

fn inspect(&self, ctx: &RequestContext) -> Decision

Read-only access to context; pipeline owns mutation of score.